AMENDMENTS TO THE CLAIMS 



This listing replaces all prior versions and listings of claims in the application: 
1-24. Cancelled 

25. (Currently amended) A method for linguistic analysis of local area network 
(LAN) data sources and wide area network (WAN) communications communicated 
on the LAN which is coupled to the WAN, said method comprising: 

establishing on a server communicatively coupled to the LAN a hierarchical 
Plurality of pre-reauisite triggers : 

initializing [[a]] an Avoid Evaluation Of This Trigger (AEOTT) rating for one of 
[[a]]the plurality of pre-requisite triggers; 

resolving the one of a plurality of pre-requisite triggers for a first of a plurality 
of data sets associated with one of the data sources or with a WAN communication 
communicated on said LAN : 

determining whether resolving the pre-requisite trigger caused an early exit; 

if resolving the pre-requisite trigger caused an early exit, modifying the 
AEOTT rating by decreasing the AEOTT rating; 

if resolving the pre-requisite trigger did not cause an early exit, modifying the 
AEOTT rating by increasing the AEOTT rating; 

resolving the plurality of pre-requisite triggers for subsequent ones of the 
plurality of data sets in an order based on the modified A EOTT rating; and 

based on said resolving steps, performing a predetermined action selected 
from the group consisting of blocking LAN access to or from a URL associated with 
the WAN communication and communicated on the LAN, alerting an administrator 
about the WAN communication communicated on the LAN or about the one of the 
data sources, and logging data about the WAN communication communicated on 
the LAN or about the one of the data sources . 
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29. (Currently amended) A machine-readable medium having instructions 
embodied as program code stored thereon for execution by a processo r in a 
communication network , the instructions configured to perform an analysis of a 
plurality of data sets being communicated on the network or present on the network 
using a hierarchal plurality of pre-requisite triggers for a category, the method 
comprising dynamically re-ordering the plurality of pre-requisite triggers based on a 
likelihood of each of the plurality of pre-requisite triggers to cause an early exit of the 
analysis during resolution of the category containing the plurality of pre-requisite 
triggers, and upon completion of the analysis of each of t he plurality of data sets, 
performing an action selected from the group consisting of blocking a URL 
associated with the plurality of data sets , alerting an administrator regarding a 
communication associated with the plurality of data sets and logging data 
associated with the plurality of data sets . 
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